Skip to content
OpenAdvisories
Medium · 4.6 CVE-2021-22567 EUVD-2021-9706

Bidirectional Override in Dart SDK

Published Jan 5, 2022 · Updated Apr 21, 2025 · Assigned by Google

Description

Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.

Affected products

VendorProductAffectedFixed
Google Dart SDK unspecified – < 2.15.0-268.18.beta 2.15.0-268.18.beta

References